983 matches found
CVE-2019-15592
CVE-2019-15592 concerns GitLab (versions 12.2.2 and earlier) where a guest user in a private project can see the merge request ID linked to an issue via the activity timeline. The underlying issue is an access-control exposure within the activity feed that reveals issue/merge request associations...
CVE-2019-15592
GitLab 12.2.2 and below contains a security vulnerability that allows a guest user in a private project to see the merge request ID associated to an issue via the activity timeline...
CVE-2019-15592
Removed by vendor...
CVE-2019-15594: Exposure of Sensitive Information to an Unauthorized Actor
GitLab 11.8 and later contains a security vulnerability that allows a user to obtain details of restricted pipelines via the merge request endpoint...
PT-2020-9723
Name of the Vulnerable Software and Affected Versions GitLab versions 11.8 and later Description The issue allows a user to obtain details of restricted pipelines via the "merge request endpoint". Recommendations For GitLab versions 11.8 and later, at the moment, there is no information about a...
CVE-2019-15592: Exposure of Sensitive Information to an Unauthorized Actor
GitLab 12.2.2 and below contains a security vulnerability that allows a guest user in a private project to see the merge request ID associated to an issue via the activity timeline...
PT-2020-9722 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions 12.2.2 and earlier Description: The issue allows a guest user in a private project to see the merge request ID associated to an issue via the activity timeline. Recommendations: For GitLab versions 12.2.2 and earlier, update t...
CVE-2019-5474
An authorization issue was discovered in GitLab EE 12.1.2, 12.0.4, and 11.11.6 allowing the merge request approval rules to be overridden without appropriate permissions...
CVE-2019-5474
An authorization issue was discovered in GitLab EE 12.1.2, 12.0.4, and 11.11.6 allowing the merge request approval rules to be overridden without appropriate permissions...
CVE-2019-5474
An authorization issue was discovered in GitLab EE 12.1.2, 12.0.4, and 11.11.6 allowing the merge request approval rules to be overridden without appropriate permissions...
Authorization
An authorization issue was discovered in GitLab EE 12.1.2, 12.0.4, and 11.11.6 allowing the merge request approval rules to be overridden without appropriate permissions...
CVE-2019-5474
CVE-2019-5474 concerns GitLab EE: an authorization flaw in versions earlier than 12.1.2, 12.0.4, and 11.11.6 allows merge request approval rules to be overridden without proper permissions. The connected records consistently describe the issue as an authorization problem affecting the merge reque...
CVE-2019-5474
Removed by vendor...
PT-2020-9716
Name of the Vulnerable Software and Affected Versions GitLab Community Edition CE and Enterprise Edition EE versions prior to 12.3.2 GitLab Community Edition CE and Enterprise Edition EE versions prior to 12.2.6 GitLab Community Edition CE and Enterprise Edition EE versions prior to 12.1.12...
CVE-2019-15581: Authorization Bypass Through User-Controlled Key
An IDOR exists in 12.3.2, 12.2.6, and 12.1.12 for GitLab Community Edition CE and Enterprise Edition EE that allowed a project owner or maintainer to see the members of any private group via merge request approval rules...
CVE-2019-5474: Improper Access Control
An authorization issue was discovered in GitLab EE 12.1.2, 12.0.4, and 11.11.6 allowing the merge request approval rules to be overridden without appropriate permissions...
PT-2020-11140
Name of the Vulnerable Software and Affected Versions GitLab EE versions prior to 12.1.2 GitLab EE versions prior to 12.0.4 GitLab EE versions prior to 11.11.6 Description An authorization issue was discovered allowing the merge request approval rules to be overridden without appropriate...
GitLab CE and EE Incorrect Access Control Vulnerability (CNVD-2020-03844)
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab CE and EE 11.4...
CVE-2019-15580
An information exposure vulnerability exists in gitlab.com v12.3.2, v12.2.6, and v12.1.10 when using the blocking merge request feature, it was possible for an unauthenticated user to see the head pipeline data of a public project even though pipeline visibility was restricted...